Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/LvaAcXs-7p7xiK8mINsVTzfIXw0.roa
File: LvaAcXs-7p7xiK8mINsVTzfIXw0.roa (raw, json)
Hash identifier: LQax/jaN5QTSuGOKR7dc+N9TDkXbRJQ21ekC/8l/9sg=
Subject key identifier: 2E:F6:80:71:7B:3E:EE:9E:F1:88:AF:26:20:DB:15:4F:37:C8:5F:0D
Certificate issuer: /CN=e35e204cc681c751b715dd23628c615f1cffed89
Certificate serial: 0185730CC4D16DA47927292E2D3927A9ADBD
Authority key identifier: E3:5E:20:4C:C6:81:C7:51:B7:15:DD:23:62:8C:61:5F:1C:FF:ED:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/414gTMaBx1G3Fd0jYoxhXxz_7Yk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/LvaAcXs-7p7xiK8mINsVTzfIXw0.roa
Signing time: Mon 02 Jan 2023 15:14:54 +0000
ROA not before: Mon 02 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40065
IP address blocks: 45.145.36.0/24 maxlen: 24
45.145.37.0/24 maxlen: 24
45.145.38.0/24 maxlen: 24
45.145.39.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:c4:d1:6d:a4:79:27:29:2e:2d:39:27:a9:ad:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35e204cc681c751b715dd23628c615f1cffed89
Validity
Not Before: Jan 2 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2ef680717b3eee9ef188af2620db154f37c85f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b6:53:a0:52:ed:7d:dd:8f:32:8d:c2:e4:af:
1f:4a:6d:88:7b:05:78:04:26:47:e1:44:92:c4:e7:
24:84:0b:94:32:4d:6b:58:bd:92:93:81:fc:9b:70:
d0:0d:5e:7a:68:ac:3c:a1:ca:fc:ea:52:d1:c4:35:
d0:26:13:48:54:95:f8:25:e6:bd:13:49:f8:80:56:
91:e2:22:02:fd:a5:0e:00:9d:f9:ad:6a:d9:ac:b0:
ea:38:d8:3e:93:27:05:55:76:4a:2f:95:c9:fe:46:
4f:44:9a:88:af:8b:98:59:0d:d5:77:06:ef:bc:09:
2a:29:c6:d3:b5:73:71:b4:4f:2a:57:a4:88:15:d9:
aa:ef:1b:ac:e7:4a:df:8f:52:70:27:b0:3e:93:07:
b8:5b:7d:1d:08:bc:6c:16:cc:e3:f1:b7:2e:a4:f0:
83:47:73:bb:39:b4:43:1a:77:5f:20:fd:11:58:3f:
c0:2a:4f:0e:a4:db:34:84:51:af:9f:dd:3e:82:31:
ef:ff:4b:53:69:49:99:3a:63:03:a3:00:0b:ec:b8:
1c:21:5a:d9:41:0f:a8:21:ca:5e:4e:b1:0e:02:b4:
a1:e7:d8:3d:00:29:60:38:57:94:4d:38:03:77:ac:
65:13:b5:41:11:3f:fe:e0:00:53:0c:b8:5f:b0:71:
53:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F6:80:71:7B:3E:EE:9E:F1:88:AF:26:20:DB:15:4F:37:C8:5F:0D
X509v3 Authority Key Identifier:
keyid:E3:5E:20:4C:C6:81:C7:51:B7:15:DD:23:62:8C:61:5F:1C:FF:ED:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/414gTMaBx1G3Fd0jYoxhXxz_7Yk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/LvaAcXs-7p7xiK8mINsVTzfIXw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3318a9-0848-45ed-9154-9cebf9a56ccc/1/414gTMaBx1G3Fd0jYoxhXxz_7Yk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.36.0/22
Signature Algorithm: sha256WithRSAEncryption
80:28:1c:5b:5d:40:18:73:49:b0:60:1a:df:04:57:52:23:cc:
7c:dd:32:1d:d4:c4:e0:3b:43:9e:ae:db:6c:4c:59:4a:63:82:
2f:02:fe:3e:e2:2b:83:47:7d:8e:27:36:3c:05:cb:61:64:1c:
ab:df:16:34:0c:d1:57:0f:60:2b:4c:2e:f4:f5:85:d0:7d:5d:
72:02:37:36:22:e6:df:08:92:5a:21:c8:cd:1a:60:f0:69:61:
e2:75:55:b7:2c:09:15:52:ba:ad:07:7a:56:4e:ac:83:ea:58:
a2:00:67:a4:be:39:17:64:99:c1:9a:cc:43:eb:c2:47:b4:13:
29:1f:28:db:2b:19:89:2c:06:53:ab:dc:50:e3:ad:70:b4:d8:
37:da:1f:ea:d1:ee:09:3e:a9:cd:22:08:80:8d:96:70:2f:66:
f3:40:5c:d0:1f:1b:5a:33:4a:2b:87:bc:da:59:93:04:a3:d4:
c0:f5:5a:e2:62:ac:ab:fc:2b:27:02:cc:67:0b:9d:2a:27:f2:
ac:20:39:67:2f:e6:52:3b:7b:e3:a4:75:7c:14:90:33:5a:3f:
8d:1d:a0:25:c7:12:ed:d4:80:ea:05:e5:ba:06:25:4d:29:89:
e0:09:a2:17:1a:29:15:e8:3e:eb:c5:38:83:75:1f:7f:eb:58:
fb:7e:3d:e2
-----BEGIN CERTIFICATE-----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Generated at Mon Jul 31 10:03:28 2023 by rpki-client on console-ams.rpki-client.org